CVE-2026-53547 Termix: Account Takeover via Global Settings Disclosure

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the POST /database/export endpoint creates a user export that includes the global settings table even though the rest of the export is user-scoped. The settings table...

EUVD-2026-62854

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service and obtain sensitive information due to an out-of-bounds read...

CVE-2026-17015

IBM i versions 7.3 through 7.6 are affected by an out-of-bounds read (CWE-125) in the 5770-SS1 feature, allowing a remote authenticated attacker to cause a denial of service and obtain sensitive information. IBM rates the vulnerability CVSS 5.4 (MEDIUM) while the NVD assigns 8.1 (HIGH) , reflecti...

CVE-2026-17015 IBM i Denial of Service

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service and obtain sensitive information due to an out-of-bounds read...

GHSA-QX7J-JV8M-FPPR vulnerabilities

Vulnerabilities for packages: logstash, druid, cassandra-reaper, conductor-fips, zipkin, logstash-fips, thingsboard, nuxeo, conductor...

GHSA-6G32-PXV4-2WFJ vulnerabilities

Vulnerabilities for packages: logstash, druid, cassandra-reaper, conductor-fips, zipkin, logstash-fips, thingsboard, traccar, nuxeo, traccar-fips, conductor...

CVE-2026-17106 vulnerabilities

Vulnerabilities for packages: docker-fips, buildkitd-fips, ctop-fips, openbao, falcoctl-fips, kubescape-server, falcoctl, buildah, skaffold, kaniko, kaniko-fips, kubescape-server-fips, kubescape, buildkitd, docker-cli-buildx-fips, docker-cli-buildx, podman, podman-fips, openbao-fips, skaffold-fip...

GHSA-PCW8-M77R-2528 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-JCQV-RJ94-JMX3 vulnerabilities

Vulnerabilities for packages: busybox...

GHSA-5XWG-CFVJ-GFF5 vulnerabilities

Vulnerabilities for packages: thingsboard, logstash, zipkin, druid, cassandra-reaper...

GHSA-5M9F-RPHJ-C435 vulnerabilities

Vulnerabilities for packages: thingsboard, logstash, zipkin, druid, cassandra-reaper...

GHSA-PCW8-M77R-2528 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-76574

A flaw has been found in code-projects Hospital Information System 1.0. The impacted element is the function User::login of the file includes/users/UsersController.php of the component User Login Handler. This manipulation of the argument email causes sql injection. The attack is possible to be...

CVE-2026-16891

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-16883

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-16888

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to a path traversal vulnerability...

CVE-2026-16839

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser...

CVE-2026-16838

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite critical files and obtain sensitive information due to a time-of-check to time-of-use TOCTOU race condition...

CVE-2026-16825

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds write...

CVE-2026-54739

In Lemmy versions before 0.19.19 and 1.0.0-beta.1, the login endpoint returns HTTP 404 for nonexistent accounts and HTTP 400 for wrong passwords on existing accounts, enabling unauthenticated user/email enumeration. No in-the-wild exploitation is reported. Upgrade to 0.19.19 or 1.0.0-beta.1.